Small and medium business | Business Central, N...

Multi tenant access

(0) Share

Report

Posted on by Maria Eriksson

We have two sister companies using Multi-tenant in Business Central and want to restrict users in company X so that they neither see nor have the ability to log into the environments for company Y.
These are two companies that should NOT have access to each other's environments. Is there any way to control this so that they cannot access or see each other's environments?/

Categories:

Dynamics 365 Business Central

I have the same question (0)

All responses (3)

Answers (0)

Suggested answer

YUN ZHU 99,090 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

If it's Multi-tenant, don't you just append different users to different tenants?

If it is the same tenant, you can use Security Group.

More details: Manage access to environments using Azure Active Directory groups (Security Group in Admin Center)

https://yzhums.com/18304/

If it is the same environment and different companies, use Company Name restrictions in the Permission Set.

Hope this helps.

Thanks.

ZHU

Was this reply helpful? Yes No
Suggested answer

Inge M. Bruvik 1,165 Moderator on at

Like (0)

Report
Copy link

Link copied!

The way to achieve this is to add the user to Entra ID security groups.

And then you can add the security group to your Business Central enviornments through the Business Central admin center.

Was this reply helpful? Yes No
Quentin Turban 8 on at

Like (0)

Report
Copy link

Link copied!

If we have multiple companies in the same environment and want to restrect access per company (using Security Group), the only way to manage this is by using the permission sets on the user card? Permissions sets which are different from the permission sets assigned to each security group?

Not sure to understand how this was designed by Microsoft exactly. It seemed easier with User Group where you could just define the company restriction on the user group (in the user card) and it would default to all permission sets like in a header/lines type of behavior.

Was this reply helpful? Yes No